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Summary 


In 2018, the MBTA entered into a P3 (public private partnership) contract with Cubic Transportations Systems to fully 
replace the MBTA’s current fare collection system by the end of 2022. The project, known as AFC 2.0, has been delayed. 


To date, Cubic and its lenders have invested over $300M into the AFC 2.0 project while the MBTA has expended 
approximately $17.5M. 


Payment Card Industry (PCI) Data Security Standards are mandatory information security standards applicable to all 


entities that store, process, or transmit credit cardholder data. New PCI Standards become effective March 31, 2025. 


A contract with Scheidt & Bachman (S&B), valued at $51.0M, will provide PCI compliance by March 2025. The contract 
also addresses State of Good Repair back office critical issues, moves to an account-based system, and extends the life of 


the current system. 


We will return to the Board with further recommendations regarding AFC 2.0. 
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Fare Transformation 


Business Continuity Plan - PCl Compliance and State of Good 
Repair 


The Automated Fare Collection System is essential to MBTA operations, and PCI compliance and maintaining our legacy system is an integral part of our business continuity plan. 


¢ PCI / Cyber Security: 
¢ MBTA’s current payment channels must be upgraded comply with new PCI 4.0 
standards by March 31, 2025 
¢ Upgrading and modernizing the legacy system mitigates known software and stability 
issues. 
¢ Our PCI consultants and Qualified Security Assessors (QSA) will continue to identify 


and mitigate vulnerabilities in our current system. 


¢ State of Good Repair: The current system and back-end software was purchased in 2006 
is beyond its useful life and is no longer supported by S&B. Most importantly, it is not able to 
be updated to meet new PCI requirements. 


PCI 
Compliance / 
Cyber 
Security 
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S&B Budget 


S&B? 

S&B Maintenance? 

S&B Optional Additional Services? 
Total S&B Contract 

20% Contingency 


Total Project Budget 


1 Amount includes $4.7M in early works agreements. 


2 Includes three years of S&B maintenance; the first year funded by Capital, remaining years funded by Operating. 
3 Amount includes known non-critical needs that improve ridership experience and MBTA fare operations. 
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Next Steps 


¢ Seek Board authorization for a contract with S&B. 


Proposed Board Vote: 


IT IS VOTED: 


That the MBTA Board of Directors hereby authorizes the General Manager or his designee, to 
enter into an agreement with Scheidt & Bachman in the amount of $51 million dollars in a form 
approved by the Chief Counsel. 
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